Calendar-invite phishing simulation

Calendar invite phishing simulation
for the meeting nobody booked.

KeenSec calendar-invite phishing simulation sends an unexpected meeting invite, such as a “performance review” or a “contract discussion” with a link to a document, to see who clicks through from their calendar.

Attack type
Calendar-invite phishing
Typical lures
Review meeting, contract discussion, payroll briefing
Measures
Clicks from the invite and submissions
Follow-up
Just-in-time lessons and LMS assignment

Sample lure

An invite feels expected,
even when it isn’t.

Calendar invites look routine. They can show up in someone’s schedule with a reminder attached, and a meeting link or “pre-read” feels like part of the job.

WHAT HAPPENS NEXT

One decision, one lesson.

  • Reported: counted as a safe action
  • Clicked, scanned or replied: a short lesson on the signs they missed
  • Every decision lands in that person’s record

How it works

Invite, click,
teach, track.

  1. 01

    Draft the invite

    AI Studio drafts the meeting invite, its landing page and the just-in-time lesson from your brief.

  2. 02

    Send the invite

    The invite reaches the selected people like any other meeting request.

  3. 03

    Teach from the calendar

    A click from the invite opens a short lesson on the tells.

  4. 04

    Measure

    Human Risk Analytics shows who clicked, who submitted and who reported it.

Questions buyers ask

Frequently asked questions.

What is calendar-invite phishing?

It is phishing delivered as a meeting invite, usually with a link to a document or sign-in page. The invite looks routine, so people click without checking.

What does a calendar-invite simulation measure?

Who clicks the link in the invite and who goes on to enter details, alongside who reports it.

What pretexts work best?

Performance reviews, contract or payroll discussions, and project kick-offs with a pre-read. AI Studio drafts them for your team to review.

Let’s connect the dots

Treat every invite
like a message. Practise it.

Bring your awareness program, your reporting workflow, or the question your current metrics cannot answer.

Book a demo